Privacy Policy
Last updated 25 October 2026
Questify is a habit tracker for small daily challenges. This page says what the app stores, why, who else handles it, and how to get rid of it.
The short version. Your habits live on your phone. There is no sign-up and no email address unless you link a Google account. A backup is kept so you do not lose your history and so your phones stay in step. Friends see a short summary only if you connect with them, and never your quests unless you choose to show one. Beyond that: crash reports, basic usage statistics and, if you buy the unlock, a record of the purchase. Nothing is sold, and there is no advertising.
Who is responsible
The data controller is Business Object, ABN 78 224 382 903, of Parcel Locker 20, Kirrawee NSW 2232, Australia. For anything on this page, write to business.object.au@gmail.com.
Our representative in the EU
Questify's maker is outside the European Union, so it has a representative there (GDPR Article 27): Stanisław Kucypera, ul. Legionów 29/1, 41-200 Sosnowiec, Poland. You may write there by post, and so may a data protection authority. Letters are passed on to us and we answer them; email is quicker.
What the app stores
On your phone is the real copy: your quests, what you logged and when, and what the app works out from them — streaks, levels and badges — with your nickname and settings. In the cloud is a backup of the same, kept under your account and readable only by it.
What exactly is stored
- Each quest you create — its title, any description, its target and schedule, and when it starts and ends
- Each day you log — the day, the time, and the amount if the quest counts something
- Your streaks, experience points, level and badges, worked out from those
- A nickname, if you choose one, and your settings. The colour theme and sound follow your account; the rest stay on each phone
- If you buy the unlock: that you have it, and when it began and ended
- If you use Friends or challenges: what Friends and Challenges below describe
- The time the app was last opened, so a clock moved backwards cannot earn a campaign badge — used for nothing else
Many quests are exercise, so what you log can say what you did and how much. The app holds only what you enter: nothing from a sensor, a fitness tracker or Health Connect — no weight, heart rate, sleep or steps.
A nickname is also kept on a list of names in use, so that no two people share one. Anybody signed in can ask whether one name is free; nobody can read the list.
Your account
The app creates an anonymous account when you first open it — an identifier, nothing you typed. You may link a Google account to get your history back on a new phone; then its email address is held too, and used only to recognise you.
Your phones
Each phone signed in to your account is listed in it, so that what you do on one reaches the others and your notifications reach all of them. You can see and remove them in Settings → Your devices.
What exactly is stored
- A random identifier for the installation
- An address for sending it notifications
- Its maker and model, and that it runs Android
- When it was last seen
Only your own phones and our server read the list.
Friends
Optional, and it takes both people: one shares an invite code, the other uses it. There is no search and no access to your contacts, so nobody finds you unless you give them a code. A friend sees a short summary of how you are doing — never your quests, unless you choose to show one.
What exactly is stored
- An invite code, who made it and who used it. It works once and expires
- A connection in each of your accounts naming the other. Either of you can end it, and ending it removes both
- The summary a friend sees: your nickname, level, longest running streak, number of badges and running quests, and the last day you did anything — a date, never a time
- A quest you choose to show: its title, streak and the last day it was done
- A shared streak, if you start one with a friend: when it began and the days you each showed up
- Reactions and nudges — 👏 🔥 💪, or a gentle reminder — with who sent them and when, and the quest a reaction was for. There is no free text
Challenges
A challenge is a quest done alongside friends you are already connected to, against each other or together. Only the people invited can see it. Our server keeps the scores and sends the challenge's notifications.
What exactly is stored
- The challenge — its title, rules, dates and who started it
- Your row on its scoreboard — your nickname, whether you joined, declined or left, your points, and which of its days you did
- A note in your account of the challenges you are in, and when you were last notified about each
Leaving keeps your row, marked as left, so the scores still add up for the others. Deleting your account removes it from every challenge.
Purchases
The app is free; an optional unlock is sold monthly, yearly or once, through Google Play. Your payment details go to Google only. RevenueCat keeps track, for us, of what you bought: your account identifier, the product, and when it began, renews or ends.
Deleting your account deletes your record at RevenueCat too, but does not cancel a subscription — cancel it in Google Play first, or it keeps renewing. Google keeps its own record of the payment under its terms.
Diagnostics
| What | Why | What it contains |
|---|---|---|
| Crash reports | So a crash gets fixed | The error, the device model, the Android version and an installation identifier. Not your quests. |
| Usage statistics | Whether the app is used at all | Automatic events only — first open, sessions, screens, purchases — an app identifier, and the rough area, a city, that Google works out from the internet address. |
| An integrity check | Only the genuine app can reach our servers | A token from Google Play saying the app is genuine. |
Reminders are scheduled by your phone and never leave it. The only notifications from our server are your friends' and your challenges'.
Who handles it, and where
Google (Google Ireland Limited and Google LLC) runs the backup, the account, notifications and diagnostics, as Firebase and Google Play, and RevenueCat, Inc. (United States) handles purchases. Both act for us only. The backup is stored in the European Union, in Belgium; diagnostics may be processed outside the EU under Google's own terms. No other company receives your data.
Why we are allowed to hold it
Under the GDPR, where it applies:
- Your account, quests, friends, challenges and purchases — performance of a contract: they are the app, and you use each part by choice.
- The backup, your phones' list and the nickname list — legitimate interests: not losing your history, keeping your phones in step, and making nicknames unique.
- Crash reports and usage statistics — legitimate interests in keeping the app working. You can switch these off in Android's settings for the app.
- Emails and letters to us — to answer them; a legal obligation when one is a request under the GDPR.
How long it is kept
Until you delete it. Deleting your account removes it at once, and from our backups within 7 days — all but crash reports and usage statistics, which Google keeps for a limited time under its own terms, and Google Play's record of a payment — see Deleting your account. Ending a friendship removes that connection and what you sent each other. Uninstalling the app removes the copy on your phone, not the backup.
- Backups are taken daily, only to recover from a fault, and each is kept for 7 days. If one is ever restored, the accounts deleted since are deleted again: for that, each deletion is noted — the account identifier and the date, nothing else — and the note is kept for 8 days.
- Unused accounts are deleted after 2 years with no activity on any of their phones. The phones get a notification about 30 days before, and opening the app starts the 2 years again.
- Emails and letters to us are kept until the matter is settled, then for up to a year, in case of a question about it.
Your rights
In the UK or the EU you may ask for a copy of your data, for it to be corrected or deleted, object to processing, or complain to your data protection authority. Write to business.object.au@gmail.com, or, in the EU, by post to our representative above. A copy and deleting are both quickest from the app, in Settings → Account: Download my data gives you one file with everything, and Delete your account removes it.
Children
Questify is not directed at children under 13.
Changes
If this policy changes, the date at the top changes with it. A change to what is collected will be said in the app as well.